Instructure, the parent of Canvas, says it reached an agreement with the ShinyHunters extortion group after a breach that exposed data from thousands of schools and universities. The company says the stolen data was returned and destroyed, while warning the records could still fuel phishing attacks against staff, students, and parents. #Instructure #Canvas #ShinyHunters
Keypoints
- Instructure says it reached an agreement with the attacker after the breach.
- The ShinyHunters group stole 3.65TB of data from Canvas-related systems.
- Nearly 9,000 organizations were impacted by the incident.
- A second wave of activity defaced Canvas login portals at about 330 institutions.
- Instructure shut down Free-For-Teacher accounts and strengthened security controls.
Read More: https://thehackernews.com/2026/05/instructure-reaches-ransom-agreement.html